1. Basic Policy: Security and Reliability

Our company implements security measures based on the following core principles:

• Protection of user information and accounts
  
• Prevention of unauthorized access and misuse
  
• Data encryption and secure communication
  
• Continuous improvement of security systems
  

Through these measures, we aim to provide a safe and reliable environment for users of the Zeon Grow platform.

2. Multi-Factor Authentication (2FA)

To enhance account security, Zeon Grow strongly recommends enabling Two-Factor Authentication (2FA).

2FA requires not only a password but also a verification code generated by an authentication application (TOTP). This additional security layer significantly reduces the risk of unauthorized account access.

Reasons for Implementation

Benefit	Description
Prevention of Unauthorized Access	Adds an additional layer of protection in case a password is leaked
Enhanced Security	Requires authentication via a smartphone authentication app during login
Secure Login Experience	Reduces the risk of unauthorized account access or misuse

2.1 What is Two-Factor Authentication (2FA)?

Two-Factor Authentication (2FA) is a security method that requires users to provide two different forms of verification when accessing a protected account or service.

Instead of relying solely on a username and password, 2FA adds an additional layer of security by requiring a second authentication factor. This helps protect accounts from common attacks such as phishing or password leaks.

With 2FA enabled, your identity is verified through two separate steps. Access to the account is granted only when both verification factors are successfully confirmed.

2.2 Authentication Factors

Authentication methods generally fall into three main categories:

Something you know
This includes passwords, PIN codes, or answers to security questions.

Something you have
This includes a mobile device used to generate one-time passwords, a hardware security key, or a smart card.

Something you are
This refers to biometric authentication such as fingerprints, facial recognition, or other biometric identifiers.

By combining authentication factors from different categories, even if one factor becomes compromised, an attacker will still be unable to access the account.

In some cases, platforms may use multi-factor authentication (MFA), which involves more than two verification factors for additional security.

2.3 How 2FA Works

A typical Two-Factor Authentication process works as follows:

1. The user enters their username and password on the login page.
   
2. The system verifies the login credentials.
   
3. The user is prompted to enter a second authentication factor, usually a one-time verification code generated by an authentication app.
   
4. Once the second factor is verified, access to the account is granted.
   

This additional verification step significantly improves account security and helps protect users from unauthorized access.

3. Data Encryption

3-1. Encrypted Communication (SSL/TLS)

All communications on our platform are protected using SSL/TLS encrypted connections.

This helps prevent interception or tampering by third parties over the internet.

3-2. Encryption of Stored Data

Sensitive data stored within the system (such as passwords, API keys, and personal information) is protected using strong encryption methods.

Because the data is stored in an encrypted format, a high level of security is maintained even in the unlikely event of a data breach.

4. Account Protection

Zeon Grow enhances account protection through the following multi-layered security measures:

• Password strength checks
  
• Recommendation to enable Two-Factor Authentication (2FA)
  
• Session management and automatic logout
  
• Monitoring of suspicious login attempts
  
• Login notifications (email alerts based on user settings)
  

These measures help prevent unauthorized access and account takeovers while protecting user accounts.

5. Fraud Prevention and Detection

Zeon Grow operates an automated monitoring system to help prevent unauthorized use.

The system detects patterns such as:

• sudden increases in access activity
  
• login attempts from unusual IP addresses
  
• simultaneous logins
  
• sudden changes in trading patterns
  

If suspicious activity is detected:

• the account may be temporarily locked
  
• additional identity verification may be requested
  
• the support team may contact the user
  

6. Security Policies and Framework

6-1. Security Policy

Our company maintains the following security policies and continuously improves them:

• strengthening information security management systems
  
• regular vulnerability assessments
  
• audits conducted by external security specialists
  
• established response procedures in case of security incidents
  

6-2. Personal Information Protection Policy

Zeon Grow considers the protection of users’ personal information a top priority and manages such information in accordance with its Privacy Policy.

For details regarding how personal information is handled, please refer to:

➡ Privacy Policy

7. Security Tips for Users

Users can further enhance their account security by following the recommendations below.

7-1. Password Management

• Use strong passwords that are difficult to guess
  
• Do not reuse the same password across multiple services
  
• Change passwords periodically
  

7-2. Use of Two-Factor Authentication

• Enable 2FA whenever possible
  
• Use authentication apps or hardware security keys where available
  

7-3. Beware of Phishing Scams

• Do not click links that are not from the official website (zeongrow.com)
  
• Avoid opening suspicious emails or SMS messages
  
• Never enter login information on unverified websites
  

7-4. API Key Permission Settings

• Keep withdrawal permissions disabled by default
  
• Do not share your API keys with others
  
• Grant only the permissions that are strictly necessary